360 Secure SkillHub
360 安全技能中心

WeryAI video tool — face change

该 Skill 提供 WeryAI 视频换脸工作流:输入公开 HTTPS 视频 URL 与参考人脸图片 URL,用 Node.js 脚本调用外部接口提交任务并轮询结果,支持 dry-run 预校验及 submit、wait、status 子命令;付费提交前须经用户确认,运行需配置 API 密钥。

zoucdr
zoucdr
热度 37.38
最近更新 2026-05-11 17:35:43
分类:创作依赖:代码执行 / 第三方 API应用场景:视频编辑 / API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add video-tool-face-change
Metadata
name
video-tool-face-change
description
Swap the face in an existing HTTPS video using a reference face image via WeryAI (video-face-change). Use when the user wants face replacement on a video URL, not text-to-video.
metadata
{"openclaw":{"emoji":"🙂","primaryEnv":"WERYAI_API_KEY","paid":true,"network_required":true,"requires":{"env":["WERYAI_API_KEY"],"bins":["node"],"node":">=18"}}}
tags
["video","weryai","video-tools"]

WeryAI video tool — face change

This skill is self-contained: it documents and runs only the face-change workflow on an existing video given by URL. It is not text-to-video or image-to-video generation from scratch.

Entry script: scripts/video_face_change.js (alongside this SKILL.md).

Runtime: WERYAI_API_KEY, Node.js 18+.

Inputs: video_url and image_url must be public https:// URLs. This script does not read local files and does not perform upload-file flows.

What this package ships (verify before trust)

Canonical layout for this skill only:

  • SKILL.md, eval.yaml
  • scripts/video_face_change.js (the only runnable script in scope)

If your copy also contains scripts/video_gen.js, scripts/video_toolkits.js, references/WERYAI_VIDEO_API.md, or other CLIs, those files are not part of this skill’s contract — they may come from another repo sync or an over-broad install. Do not run them when you only want face-change; remove them or reinstall from a clean source. Inspect what you run: node scripts/video_face_change.js spec.

Other tools (multi-endpoint CLIs, local-file upload to growth/upload-file APIs, extra environment variables in those CLIs) are out of scope for this package. This skill’s script uses only WERYAI_API_KEY and public https:// URLs.

API surface (this tool only)

  • Required: video_url, image_url (public https:// URLs)

From this skill root, run node scripts/video_face_change.js spec to print the full tool schema (endpoint, required fields, defaults, enums) as JSON.

Pre-submit gate (mandatory)

Do not run submit / wait until the user explicitly confirms both URLs. Paid runs are not idempotent.

Workflow

Prefer --dry-run to validate JSON. Use wait to submit and poll until the task finishes; use submit only when the user wants a task_id without blocking, then status for later checks. Share final URLs as Markdown links [Video](https://…).

CLI

From this skill root:

node scripts/video_face_change.js wait \
  --json '{"video_url":"https://example.com/video.mp4","image_url":"https://example.com/face.jpg"}'

node scripts/video_face_change.js submit \
  --json '{"video_url":"https://example.com/video.mp4","image_url":"https://example.com/face.jpg"}'

node scripts/video_face_change.js status --task-id <task-id>

Dry-run:

node scripts/video_face_change.js wait \
  --json '{"video_url":"https://example.com/video.mp4","image_url":"https://example.com/face.jpg"}' \
  --dry-run

Security

Never write WERYAI_API_KEY into files. Keep only WERYAI_API_KEY set for this workflow; do not rely on undocumented env vars in sibling scripts if any were mistakenly present. The in-scope script reads only WERYAI_API_KEY (no other env keys). video_face_change.js accepts only https:// media URLs (no disk read / no upload-file). Base URL and poll intervals are constants in the script, not env-driven.

Do not pass local filesystem paths or run tools that accept them unless you have explicitly reviewed and consented to their upload behavior — that is never required for this skill.

Out of scope

  • Lip-sync–only workflows (different API surface)
  • Text-to-video or image-to-video from scratch

References